PT-2020-10489

Name of the Vulnerable Software and Affected Versions Open edX Ironwood.1 Description The issue allows for reflected XSS, specifically through the support/certificates?user= endpoint. This can potentially lead to malicious script execution. Recommendations For Open edX Ironwood.1, as a temporary...

CVE-2019-20513: Improper Neutralization of Input During Web Page Generation

Open edX Ironwood.1 allows support/certificates?user= reflected XSS...